diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2020-07-08 14:58:57 +0300 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-08-21 10:48:09 +0300 |
commit | 164d80107670adadf8a5de9ffa8e31cee5979e7f (patch) | |
tree | e36bada53a0298153686970659ababd9d31bf27b /Documentation/IPMI.txt | |
parent | 4665a815ffe8295d687d4b3ffec0bbdd98b1731a (diff) | |
download | linux-164d80107670adadf8a5de9ffa8e31cee5979e7f.tar.xz |
mwifiex: Prevent memory corruption handling keys
[ Upstream commit e18696786548244914f36ec3c46ac99c53df99c3 ]
The length of the key comes from the network and it's a 16 bit number. It
needs to be capped to prevent a buffer overflow.
Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ganapathi Bhat <ganapathi.bhat@nxp.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200708115857.GA13729@mwanda
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'Documentation/IPMI.txt')
0 files changed, 0 insertions, 0 deletions